Privacy Policy

This Privacy Policy explains how Beacon Airport Systems, Inc. (“FlightLedger,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the FlightLedger website (flight-ledger.com), web application, and mobile applications (together, the “Service”). FlightLedger helps owners of personally-owned aircraft log flights and expenses and substantiate the business-use portion of aircraft costs for tax purposes.

By using the Service, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account information

We use OAuth-based sign-in only — Google, Apple, Facebook/Meta, and Microsoft — and never ask you to create or store a password with us. When you sign in, the provider you choose shares basic profile information with us, typically your name, email address, and profile photo. We do not receive your password or credentials for that provider.

1.2 Flight, aircraft, and business records

Information you enter to use the Service, including:

• Aircraft tail numbers and associated details.
• Flight records: dates, routes, duration, purpose, category (business, personal, training/currency, repositioning/maintenance), passengers, and notes.
• Business entities you create or are invited to (e.g., LLC names) and their association with aircraft.
• Reconciliation data, such as total hours you report from a Hobbs meter or logbook.

1.3 Expense and receipt information

Expense entries (vendor, amount, date, category) and, if you use receipt scanning, photos of receipts you capture or upload. Receipt images are processed to extract vendor, amount, date, and category information to pre-fill expense entries.

1.4 Sharing and invitation information

If you invite someone to co-manage an aircraft or business entity, we collect the email address you provide for that invitation, and we link that invitation to the invited person’s account once they sign in with a matching email.

1.5 Payment information

If you subscribe to a paid plan, payment card and billing details are collected and processed by our payment processor. We do not store your full payment card number on our servers.

1.6 Usage and device information

Standard technical information such as IP address, browser or device type, operating system, pages viewed, and general usage patterns, collected automatically to operate, secure, and improve the Service. If you use our mobile apps, this may include device identifiers and, if you enable them, push-notification tokens.

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and operate the Service, including logging flights and expenses, computing business-use percentages, and running reconciliations.
• Process receipt images to pre-fill expense entries.
• Enable sharing features, such as aircraft and entity membership, co-owner and CPA/bookkeeper access, and invitations.
• Process payments, manage subscriptions, and administer free trials.
• Communicate with you about your account, transactional matters, and (where permitted) product updates.
• Monitor, secure, and troubleshoot the Service, and prevent fraud or misuse.
• Comply with legal obligations and enforce our terms.

We do not use your flight, aircraft, or expense records for advertising, and we do not sell your personal information.

3. How We Share Information

3.1 Other users of the Service

FlightLedger’s sharing features are built around two independent membership types:

• Aircraft membership lets co-owners log flights and expenses and run reconciliations for a shared aircraft.
• Entity membership lets business members (such as a co-owner or a CPA/bookkeeper) see the full business activity of a shared entity across every aircraft it uses.

You see full flight detail (route, purpose, passengers, notes) only for flights you logged yourself, or business flights tied to an entity you belong to. Other members’ flights on a shared aircraft still count toward hours and business-use calculations but appear to you only as an aggregated total, not as itemized entries. Owners of an aircraft or entity control who is invited to and removed from it.

3.2 Service providers

We share information with third-party service providers who process it on our behalf, under contractual confidentiality and data-protection obligations, including:

• Supabase — hosting, authentication, database, and file storage infrastructure.
• Google Cloud / Google Document AI — parsing of receipt images you choose to scan.
• Google, Apple, Meta (Facebook), and Microsoft — sign-in/authentication when you choose to use one of these providers.
• Our payment processor — billing and subscription management for paid plans.

3.3 Legal and safety reasons

We may disclose information if required by law, subpoena, or legal process, or if we believe in good faith it is necessary to protect the rights, property, or safety of FlightLedger, our users, or others.

3.4 Business transfers

If FlightLedger is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.

3.5 We do not sell personal information

We do not sell your personal information to third parties, and we do not share it with third parties for their own independent marketing purposes.

4. Data Retention

We retain your information for as long as your account is active. If a paid subscription lapses, your records remain readable and exportable for 12 months. You may request deletion of your account and associated data at any time by contacting us as described in Section 11; we will delete or de-identify your information within a reasonable period, except where we are required or permitted to retain it (for example, billing records needed for tax or accounting purposes).

5. Your Privacy Choices

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate information (most flight, expense, and account information can be edited directly in the Service).
• Delete your personal information, subject to Section 4.
• Export your data — flight and expense records can be exported directly from the Service (for example, as CSV).
• Opt out of the sale or sharing of personal information — as noted above, we do not sell or share personal information for cross-context behavioral advertising, so this is inherently satisfied.

To exercise any of these rights, contact us at privacy@flight-ledger.com. We will respond within a reasonable time and may need to verify your identity before completing your request.

6. Data Security

We use commercially reasonable measures designed to protect your information, including:

• Encryption of data in transit and at rest through our infrastructure provider.
• Row-level access controls so that, by default, users can only see flight and expense records they are entitled to see.
• No password storage — because we use OAuth-only sign-in, we never receive or store your credentials for any sign-in provider.
• Restricted handling of third-party service credentials (for example, receipt-parsing credentials are held only in secure server-side environments and are never exposed to your browser or device).

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children’s Privacy

The Service is intended for adults managing aircraft and business finances and is not directed to individuals under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. International Users

FlightLedger is operated from, and its infrastructure is hosted in, the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection laws than your home jurisdiction.

9. Third-Party Sign-In Services

When you sign in with Google, Apple, Facebook/Meta, or Microsoft, your use of that provider is also subject to that provider’s own privacy policy and terms. We only receive the profile information the provider shares with us at sign-in (typically name and email), and we do not control, and are not responsible for, those providers’ own data practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the effective date above and, where appropriate, through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at: